304 lines
8.8 KiB
Diff
304 lines
8.8 KiB
Diff
|
From 36f9fb0c7e19bda07ce6de5f4b04f58a5da2f122 Mon Sep 17 00:00:00 2001
|
||
|
|
From: Frantisek Sumsal <frantisek@sumsal.cz>
|
||
|
|
Date: Sun, 18 Apr 2021 20:46:06 +0200
|
||
|
|
Subject: [PATCH] ci: drop CIs irrelevant for downstream
|
||
|
|
|
||
|
|
* CIFuzz would need a separate project in oss-fuzz
|
||
|
|
* Coverity would also need a separate project
|
||
|
|
* the Labeler action is superfluous, since we already have a bot for
|
||
|
|
that
|
||
|
|
* mkosi testing on other distros is irrelevant for downstream RHEL
|
||
|
|
repo
|
||
|
|
|
||
|
|
Related: #2138081
|
||
|
|
rhel-only
|
||
|
|
---
|
||
|
|
.github/labeler.yml | 40 ---------------
|
||
|
|
.github/workflows/cifuzz.yml | 62 -----------------------
|
||
|
|
.github/workflows/coverity.yml | 30 ------------
|
||
|
|
.github/workflows/labeler.yml | 24 ---------
|
||
|
|
.github/workflows/mkosi.yml | 90 ----------------------------------
|
||
|
|
5 files changed, 246 deletions(-)
|
||
|
|
delete mode 100644 .github/labeler.yml
|
||
|
|
delete mode 100644 .github/workflows/cifuzz.yml
|
||
|
|
delete mode 100644 .github/workflows/coverity.yml
|
||
|
|
delete mode 100644 .github/workflows/labeler.yml
|
||
|
|
delete mode 100644 .github/workflows/mkosi.yml
|
||
|
|
|
||
|
|
diff --git a/.github/labeler.yml b/.github/labeler.yml
|
||
|
|
deleted file mode 100644
|
||
|
|
index 7d128f42d6..0000000000
|
||
|
|
--- a/.github/labeler.yml
|
||
|
|
+++ /dev/null
|
||
|
|
@@ -1,40 +0,0 @@
|
||
|
|
-# SPDX-License-Identifier: LGPL-2.1-or-later
|
||
|
|
-
|
||
|
|
-hwdb:
|
||
|
|
- - hwdb.d/**/*
|
||
|
|
-units:
|
||
|
|
- - units/**/*
|
||
|
|
-documentation:
|
||
|
|
- - NEWS
|
||
|
|
- - docs/*
|
||
|
|
-network:
|
||
|
|
- - src/libsystemd-network/**/*
|
||
|
|
- - src/network/**/*
|
||
|
|
-udev:
|
||
|
|
- - src/udev/**/*
|
||
|
|
- - src/libudev/*
|
||
|
|
-selinux:
|
||
|
|
- - '**/*selinux*'
|
||
|
|
-apparmor:
|
||
|
|
- - '**/*apparmor*'
|
||
|
|
-meson:
|
||
|
|
- - meson_option.txt
|
||
|
|
-mkosi:
|
||
|
|
- - .mkosi/*
|
||
|
|
- - mkosi.build
|
||
|
|
-busctl:
|
||
|
|
- - src/busctl/*
|
||
|
|
-systemctl:
|
||
|
|
- - src/systemctl/*
|
||
|
|
-journal:
|
||
|
|
- - src/journal/*
|
||
|
|
-journal-remote:
|
||
|
|
- - src/journal-remote/*
|
||
|
|
-portable:
|
||
|
|
- - src/portable/**/*
|
||
|
|
-resolve:
|
||
|
|
- - src/resolve/*
|
||
|
|
-timedate:
|
||
|
|
- - src/timedate/*
|
||
|
|
-timesync:
|
||
|
|
- - src/timesync/*
|
||
|
|
diff --git a/.github/workflows/cifuzz.yml b/.github/workflows/cifuzz.yml
|
||
|
|
deleted file mode 100644
|
||
|
|
index 25731abc5a..0000000000
|
||
|
|
--- a/.github/workflows/cifuzz.yml
|
||
|
|
+++ /dev/null
|
||
|
|
@@ -1,62 +0,0 @@
|
||
|
|
----
|
||
|
|
-# vi: ts=2 sw=2 et:
|
||
|
|
-# SPDX-License-Identifier: LGPL-2.1-or-later
|
||
|
|
-# See: https://google.github.io/oss-fuzz/getting-started/continuous-integration/
|
||
|
|
-
|
||
|
|
-name: CIFuzz
|
||
|
|
-
|
||
|
|
-permissions:
|
||
|
|
- contents: read
|
||
|
|
-
|
||
|
|
-on:
|
||
|
|
- pull_request:
|
||
|
|
- paths:
|
||
|
|
- - '**/meson.build'
|
||
|
|
- - '.github/workflows/**'
|
||
|
|
- - 'meson_options.txt'
|
||
|
|
- - 'src/**'
|
||
|
|
- - 'test/fuzz/**'
|
||
|
|
- - 'tools/oss-fuzz.sh'
|
||
|
|
- push:
|
||
|
|
- branches:
|
||
|
|
- - main
|
||
|
|
-jobs:
|
||
|
|
- Fuzzing:
|
||
|
|
- runs-on: ubuntu-latest
|
||
|
|
- if: github.repository == 'systemd/systemd'
|
||
|
|
- concurrency:
|
||
|
|
- group: ${{ github.workflow }}-${{ matrix.sanitizer }}-${{ matrix.architecture }}-${{ github.ref }}
|
||
|
|
- cancel-in-progress: true
|
||
|
|
- strategy:
|
||
|
|
- fail-fast: false
|
||
|
|
- matrix:
|
||
|
|
- sanitizer: [address, undefined, memory]
|
||
|
|
- architecture: [x86_64]
|
||
|
|
- include:
|
||
|
|
- - sanitizer: address
|
||
|
|
- architecture: i386
|
||
|
|
- steps:
|
||
|
|
- - name: Build Fuzzers (${{ matrix.sanitizer }})
|
||
|
|
- id: build
|
||
|
|
- uses: google/oss-fuzz/infra/cifuzz/actions/build_fuzzers@master
|
||
|
|
- with:
|
||
|
|
- oss-fuzz-project-name: 'systemd'
|
||
|
|
- dry-run: false
|
||
|
|
- allowed-broken-targets-percentage: 0
|
||
|
|
- # keep-unaffected-fuzz-targets should be removed once https://github.com/google/oss-fuzz/issues/7011 is fixed
|
||
|
|
- keep-unaffected-fuzz-targets: true
|
||
|
|
- sanitizer: ${{ matrix.sanitizer }}
|
||
|
|
- architecture: ${{ matrix.architecture }}
|
||
|
|
- - name: Run Fuzzers (${{ matrix.sanitizer }})
|
||
|
|
- uses: google/oss-fuzz/infra/cifuzz/actions/run_fuzzers@master
|
||
|
|
- with:
|
||
|
|
- oss-fuzz-project-name: 'systemd'
|
||
|
|
- fuzz-seconds: 600
|
||
|
|
- dry-run: false
|
||
|
|
- sanitizer: ${{ matrix.sanitizer }}
|
||
|
|
- - name: Upload Crash
|
||
|
|
- uses: actions/upload-artifact@3cea5372237819ed00197afe530f5a7ea3e805c8
|
||
|
|
- if: failure() && steps.build.outcome == 'success'
|
||
|
|
- with:
|
||
|
|
- name: ${{ matrix.sanitizer }}-${{ matrix.architecture }}-artifacts
|
||
|
|
- path: ./out/artifacts
|
||
|
|
diff --git a/.github/workflows/coverity.yml b/.github/workflows/coverity.yml
|
||
|
|
deleted file mode 100644
|
||
|
|
index 3fbebc6bbf..0000000000
|
||
|
|
--- a/.github/workflows/coverity.yml
|
||
|
|
+++ /dev/null
|
||
|
|
@@ -1,30 +0,0 @@
|
||
|
|
----
|
||
|
|
-# vi: ts=2 sw=2 et:
|
||
|
|
-# SPDX-License-Identifier: LGPL-2.1-or-later
|
||
|
|
-#
|
||
|
|
-name: Coverity
|
||
|
|
-
|
||
|
|
-on:
|
||
|
|
- schedule:
|
||
|
|
- # Run Coverity daily at midnight
|
||
|
|
- - cron: '0 0 * * *'
|
||
|
|
-
|
||
|
|
-permissions:
|
||
|
|
- contents: read
|
||
|
|
-
|
||
|
|
-jobs:
|
||
|
|
- build:
|
||
|
|
- runs-on: ubuntu-22.04
|
||
|
|
- if: github.repository == 'systemd/systemd'
|
||
|
|
- env:
|
||
|
|
- # Set in repo settings -> secrets -> actions
|
||
|
|
- COVERITY_SCAN_TOKEN: "${{ secrets.COVERITY_SCAN_TOKEN }}"
|
||
|
|
- COVERITY_SCAN_NOTIFICATION_EMAIL: "${{ secrets.COVERITY_SCAN_NOTIFICATION_EMAIL }}"
|
||
|
|
- steps:
|
||
|
|
- - name: Repository checkout
|
||
|
|
- uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b
|
||
|
|
- # Reuse the setup phase of the unit test script to avoid code duplication
|
||
|
|
- - name: Install build dependencies
|
||
|
|
- run: sudo -E .github/workflows/unit_tests.sh SETUP
|
||
|
|
- - name: Build & upload the results
|
||
|
|
- run: tools/coverity.sh
|
||
|
|
diff --git a/.github/workflows/labeler.yml b/.github/workflows/labeler.yml
|
||
|
|
deleted file mode 100644
|
||
|
|
index 35766df591..0000000000
|
||
|
|
--- a/.github/workflows/labeler.yml
|
||
|
|
+++ /dev/null
|
||
|
|
@@ -1,24 +0,0 @@
|
||
|
|
----
|
||
|
|
-# vi: ts=2 sw=2 et:
|
||
|
|
-# SPDX-License-Identifier: LGPL-2.1-or-later
|
||
|
|
-#
|
||
|
|
-name: "Pull Request Labeler"
|
||
|
|
-
|
||
|
|
-on:
|
||
|
|
-- pull_request_target
|
||
|
|
-
|
||
|
|
-permissions:
|
||
|
|
- contents: read
|
||
|
|
-
|
||
|
|
-jobs:
|
||
|
|
- triage:
|
||
|
|
- if: github.event.repository.name != 'systemd-security'
|
||
|
|
- runs-on: ubuntu-latest
|
||
|
|
- permissions:
|
||
|
|
- pull-requests: write
|
||
|
|
- steps:
|
||
|
|
- - uses: actions/labeler@e54e5b338fbd6e6cdb5d60f51c22335fc57c401e
|
||
|
|
- with:
|
||
|
|
- repo-token: "${{ secrets.GITHUB_TOKEN }}"
|
||
|
|
- configuration-path: .github/labeler.yml
|
||
|
|
- sync-labels: "" # This is a workaround for issue 18671
|
||
|
|
diff --git a/.github/workflows/mkosi.yml b/.github/workflows/mkosi.yml
|
||
|
|
deleted file mode 100644
|
||
|
|
index 2a1163aa07..0000000000
|
||
|
|
--- a/.github/workflows/mkosi.yml
|
||
|
|
+++ /dev/null
|
||
|
|
@@ -1,90 +0,0 @@
|
||
|
|
----
|
||
|
|
-# vi: ts=2 sw=2 et:
|
||
|
|
-# SPDX-License-Identifier: LGPL-2.1-or-later
|
||
|
|
-# Simple boot tests that build and boot the mkosi images generated by the mkosi config files in mkosi.default.d/.
|
||
|
|
-name: mkosi
|
||
|
|
-
|
||
|
|
-on:
|
||
|
|
- push:
|
||
|
|
- branches:
|
||
|
|
- - main
|
||
|
|
- - v[0-9]+-stable
|
||
|
|
- pull_request:
|
||
|
|
- branches:
|
||
|
|
- - main
|
||
|
|
- - v[0-9]+-stable
|
||
|
|
-
|
||
|
|
-permissions:
|
||
|
|
- contents: read
|
||
|
|
-
|
||
|
|
-env:
|
||
|
|
- # Enable debug logging in systemd, but keep udev's log level to info,
|
||
|
|
- # since it's _very_ verbose in the QEMU task
|
||
|
|
- # Disable the ISC DHCP servers, as they are failing in Ubuntu
|
||
|
|
- KERNEL_CMDLINE: "systemd.unit=mkosi-check-and-shutdown.service !quiet systemd.log_level=debug systemd.log_target=console udev.log_level=info systemd.default_standard_output=journal+console systemd.mask=isc-dhcp-server6.service systemd.mask=isc-dhcp-server.service"
|
||
|
|
-
|
||
|
|
-jobs:
|
||
|
|
- ci:
|
||
|
|
- runs-on: ubuntu-22.04
|
||
|
|
- concurrency:
|
||
|
|
- group: ${{ github.workflow }}-${{ matrix.distro }}-${{ matrix.release }}-${{ github.ref }}
|
||
|
|
- cancel-in-progress: true
|
||
|
|
- strategy:
|
||
|
|
- fail-fast: false
|
||
|
|
- matrix:
|
||
|
|
- include:
|
||
|
|
- - distro: arch
|
||
|
|
- release: rolling
|
||
|
|
- - distro: debian
|
||
|
|
- release: testing
|
||
|
|
- - distro: ubuntu
|
||
|
|
- release: jammy
|
||
|
|
- - distro: fedora
|
||
|
|
- release: "37"
|
||
|
|
- - distro: fedora
|
||
|
|
- release: rawhide
|
||
|
|
- - distro: opensuse
|
||
|
|
- release: tumbleweed
|
||
|
|
- - distro: centos_epel
|
||
|
|
- release: 9-stream
|
||
|
|
- - distro: centos_epel
|
||
|
|
- release: 8-stream
|
||
|
|
-
|
||
|
|
- steps:
|
||
|
|
- - uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b
|
||
|
|
- - uses: systemd/mkosi@792cbc60eb2dc4a58d66bb3c212bf92f8d50f6ea
|
||
|
|
-
|
||
|
|
- - name: Install
|
||
|
|
- run: sudo apt-get update && sudo apt-get install --no-install-recommends python3-pexpect python3-jinja2
|
||
|
|
-
|
||
|
|
- - name: Configure
|
||
|
|
- run: |
|
||
|
|
- tee mkosi.default <<- EOF
|
||
|
|
- [Distribution]
|
||
|
|
- Distribution=${{ matrix.distro }}
|
||
|
|
- Release=${{ matrix.release }}
|
||
|
|
-
|
||
|
|
- [Content]
|
||
|
|
- Environment=CI_BUILD=1
|
||
|
|
-
|
||
|
|
- [Output]
|
||
|
|
- KernelCommandLine=${{ env.KERNEL_CMDLINE }}
|
||
|
|
- EOF
|
||
|
|
-
|
||
|
|
- - name: Build ${{ matrix.distro }}
|
||
|
|
- run: sudo python3 -m mkosi build
|
||
|
|
-
|
||
|
|
- - name: Show ${{ matrix.distro }} image summary
|
||
|
|
- run: sudo python3 -m mkosi summary
|
||
|
|
-
|
||
|
|
- - name: Boot ${{ matrix.distro }} systemd-nspawn
|
||
|
|
- run: sudo python3 -m mkosi boot ${{ env.KERNEL_CMDLINE }}
|
||
|
|
-
|
||
|
|
- - name: Check ${{ matrix.distro }} systemd-nspawn
|
||
|
|
- run: sudo python3 -m mkosi shell bash -c "[[ -e /testok ]] || { cat /failed-services; exit 1; }"
|
||
|
|
-
|
||
|
|
- - name: Boot ${{ matrix.distro }} QEMU
|
||
|
|
- run: sudo timeout -k 30 10m python3 -m mkosi qemu
|
||
|
|
-
|
||
|
|
- - name: Check ${{ matrix.distro }} QEMU
|
||
|
|
- run: sudo python3 -m mkosi shell bash -c "[[ -e /testok ]] || { cat /failed-services; exit 1; }"
|